Amendments to the Claims 

Claims 1-22 (canceled) 

1 Claim 23 (currently amended): A computer program product for providing an auditable trail of 

2 product transfers, the computer program product embodied on one or more computer-readable 

3 media and comprising: 

4 computer-readable program code for computing, for each transfer of a particular product, 

5 a globally-unique identifier associated with for the transfer[[;]] and a cryptographic signature over 

6 one or more values describing the transfer; 

7 computer-readable program code for computing a crypto graphic signature over one or 

8 mor e valu e s d e scribing the transfer; 

9 computer-readable program code for recordin g, for each of the transfers, the 

1 0 cryptographic signature, the globally-unique identifier, and zero or more of the values in a 

1 1 product-integral ownership repository on the particular product; 

12 computer-readable program code for recording an audit record for each of the transfer 

13 transfers in an audit repository, wherein the audit record for each of the transfers comprises the 

14 cryptographic signature, the globally-unique identifier, and the one or more values describing the 

15 transfer ; and 

16 computer-readable program code for tracing transfers of the particular product using each 

17 of the audit records that pertains to the particular product. 
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Claim 24 (currently amended): 
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2 each audit record that pertains to the particular product further comprises a second globally- 

3 unique identifier whic h is associated with was computed for a next-previous most-recent previous 

4 transfer of the particular product, and wherein the computer-readable program code for tracing 

5 further comprises iteratively using the second globally-unique identifier, when processing the audit 

6 record, to locate the audit record which records the next -previous most-recent previous transfer. 

Claims 25 - 29 (canceled) 

1 Claim 30 (currently amended): A method for providing an auditable trail of product transfers, 

2 comprising steps of: 

3 computing, for each transfer of a particular product, a globally-unique identifier 

4 associated with for the transfcr[[;]] and a cryptographic signature over one or more values 

5 describing the transfer; 

6 computing a cryptographic signature over one or more values describing the transfer; 

7 recording , for each of the transfers, the cryptographic signature, the globally-unique 

8 identifier, and zero or more of the values in a product-integral ownership repository on the 

9 particular product; 

10 recording an audit record for each of the transfer transfers in an audit repository, wherein 

1 1 the audit record for each of the transfers comprises the cryptographic signature, the globally- 

12 unique identifier, and the one or more values describing the transfer ; and 

13 tracing transfers of the particular product using each of the audit records that pertains to 

14 the particular product. 
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1 Claim 3 1 (currently amended): The method according to Claim 30, wherein each audit record 

2 that pertains to the particular product further comprises a second globally-unique identifier which 

3 is associated with was computed for a next-previous most-recent previous transfer of the 

4 particular product, and wherein the tracing step further comprises iteratively using the second 

5 globally-unique identifier, when processing the audit record, to locate the audit record which 

6 records the next-previous most-recent previous transfer. 

1 Claim 32 (currently amended): A system for providing an auditable trail of product transfers, 

2 comprising: 

3 means for computing, for each transfer of a particular product, a globally-unique identifier 

4 associated with for the transfcr[[;]] and a cryptographic signature over one or more values 

5 describing the transfer; 

6 means for computing a cryptographic signature over one or more values describing the 

7 transfer; 

8 means for recording , for each of the transfers, the cryptographic signature, the globally- 

9 unique identifier, and zero or more of the values in a product-integral ownership repository on the 

10 particular product; 

1 1 means for recording an audit record for each of the transfer transfers in an audit 

12 repository, wherein the audit record for each of the transfers comprises the cryptographic 

13 signature, the globally-unique identifier, and the one or more values describing the transfer ; and 

14 means for tracing transfers of the particular product using each of the audit records that 
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pertains to the particular product. 



1 Claim 33 (currently amended): The system according to Claim 32, wherein each audit record that 

2 pertains to the particular product further comprises a second globally-unique identifier whichis 

3 associated with was computed for a next-previous most-recent previous transfer of the particular 

4 product, and wherein the means for tracing further comprises iteratively using the second 

5 globally-unique identifier, when processing the audit record, to locate the audit record which 

6 records the next-previous most-recent previous transfer. 

1 Claim 34 (new): The computer program product according to Claim 23, wherein the audit record 

2 for each of the transfers further comprises an additional globally-unique identifier that was 

3 computed for a most-recent previous transfer of the particular product. 

1 Claim 35 (new): The computer program product according to Claim 23, wherein the product- 

2 integral ownership repository comprises a memory of a radio frequency identification device. 

1 Claim 36 (new): The computer program product according to Claim 23, wherein the product- 

2 integral ownership repository comprises a memory of a machine-readable identification device. 

1 Claim 37 (new): The computer program product according to Claim 23, wherein the globally- 

2 unique identifier computed for each transfer is usable as an index for retrieving the audit record 

3 for that transfer from the audit repository. 
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1 Claim 38 (new): The computer program product according to Claim 23, wherein: 

2 the computer-readable program code for recording records the cryptographic signature, 

3 the globally-unique identifier, and the zero or more of the values for each of the transfers in a 

4 corresponding ownership transfer record in the product-integral ownership repository; and 

5 the ownership transfer record is access-protected using control fields to dictate which of 

6 the cryptographic signature, the globally-unique identifier, and the zero or more of the values are 

7 updateable and which are not. 

1 Claim 39 (new): The method according to Claim 30, wherein the audit record for each of the 

2 transfers further comprises an additional globally-unique identifier that was computed for a most- 

3 recent previous transfer of the particular product. 

1 Claim 40 (new): The method according to Claim 30, wherein the product-integral ownership 

2 repository comprises a memory of a radio frequency identification device. 

1 Claim 41 (new): The method according to Claim 30, wherein the product-integral ownership 

2 repository comprises a memory of a machine-readable identification device. 

1 Claim 42 (new): The method according to Claim 30, wherein the globally-unique identifier 

2 computed for each transfer is usable as an index for retrieving the audit record for that transfer 

3 from the audit repository. 
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1 Claim 43 (new): The method according to Claim 30, wherein: 

2 the recording step records the cryptographic signature, the globally-unique identifier, and 

3 the zero or more of the values for each of the transfers in a corresponding ownership transfer 

4 record in the product-integral ownership repository; and 

5 the ownership transfer record is access-protected using control fields to dictate which of 

6 the cryptographic signature, the globally-unique identifier, and the zero or more of the values are 

7 updateable and which are not. 

1 Claim 44 (new): The system according to Claim 32, wherein the audit record for each of the 

2 transfers further comprises an additional globally-unique identifier that was computed for a most- 

3 recent previous transfer of the particular product. 

1 Claim 45 (new): The system according to Claim 32, wherein the product-integral ownership 

2 repository comprises a memory of a radio frequency identification device. 

1 Claim 46 (new): The system according to Claim 32, wherein the product-integral ownership 

2 repository comprises a memory of a machine-readable identification device. 

1 Claim 47 (new): The system according to Claim 32, wherein the globally-unique identifier 

2 computed for each transfer is usable as an index for retrieving the audit record for that transfer 

3 from the audit repository. 
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